Anthropic
Certifications & attestations
| Certification | Status | Source | Last verified |
|---|---|---|---|
| SOC 2 Type II SOC 2 Type I & Type II for commercial products (Claude for Work, Anthropic API). Report available via the trust portal (NDA). | Verified | vendor source ↗ | June 10, 2026 |
| ISO 27001 ISO/IEC 27001:2022 information security management. | Verified | vendor source ↗ | June 10, 2026 |
| ISO 42001 ISO/IEC 42001:2023 AI management systems. | Verified | vendor source ↗ | June 10, 2026 |
| HIPAA HIPAA-ready configuration; BAA available for commercial customers. | Verified | vendor source ↗ | June 10, 2026 |
→ Direct answer: Does Anthropic have SOC 2?
Subprocessors
18 subprocessors on record. Vendor's own list: source ↗
| Subprocessor | Purpose | Location | First seen |
|---|---|---|---|
| Google Cloud Platform | Cloud infrastructure (all products) | Worldwide | 2026-06-10 |
| Amazon Web Services | Cloud infrastructure (all products) | Worldwide | 2026-06-10 |
| Microsoft Azure | Cloud infrastructure (all products) | Worldwide | 2026-06-10 |
| Cloudflare | Traffic routing / CDN (all products) | Worldwide (local to customer) | 2026-06-10 |
| Stripe | Billing (Claude Pro/Max, Claude Developer Platform, Claude for Work) | United States | 2026-06-10 |
| WorkOS | Security, single sign-on (Claude for Work, Claude Developer Platform) | United States | 2026-06-10 |
| Intercom | User support (all products except Claude for Government) | United States | 2026-06-10 |
| Nutun | User support (all products except Claude for Government) | South Africa | 2026-06-10 |
| Boldr | User support (all products except Claude for Government) | Canada | 2026-06-10 |
| Twilio | Analytics, email/SMS communications (all products except Claude for Government) | United States | 2026-06-10 |
| Iterable | Email communications (all products except Claude for Government) | United States | 2026-06-10 |
| Functional Software (dba Sentry) | Error handling, user support (all products except Claude for Government) | United States | 2026-06-10 |
| Sift | Fraud and abuse detection (all products except Claude for Government) | United States | 2026-06-10 |
| Arkose Labs | Fraud and abuse detection (all products except Claude for Government) | United States | 2026-06-10 |
| Brave Search | Web search (all products) | United States | 2026-06-10 |
| ElevenLabs | Text to speech — voice mode (Claude for Work) | United States | 2026-06-10 |
| Palantir Federal Cloud Service (PFCS) | FedRAMP cloud (Claude for Government) | United States | 2026-06-10 |
| TurboPuffer | Web search (all products except Claude for Government) | United States | 2026-06-10 |
Hosting & data residency
- InfrastructureAmazon Web Services, Google Cloud Platform
- Data residencynot yet recorded
Trust documents & links
- Trust centerhttps://trust.anthropic.com
- Security pagehttps://privacy.claude.com/en/collections/10671789-compliance-controls-certifications
- DPAhttps://www.anthropic.com/legal/data-processing-addendum
- Status pagehttps://status.anthropic.com
Security incidents & disclosures
No incidents on record in the public sources we track, as of June 10, 2026. Absence of a record is not a guarantee — see methodology.
Change history
2026-06-10
Vendor added with a verified initial snapshot: SOC 2 Type II, ISO 27001:2022, ISO/IEC 42001:2023, and HIPAA BAA availability confirmed against Anthropic's Privacy Center certification article (fetched 2026-06-10). DPA confirmed at anthropic.com/legal/data-processing-addendum. Trust portal (trust.anthropic.com) is JS-rendered — Vanta-hosted; subprocessor list extraction pending.
2026-06-10
Subprocessor list extracted from Anthropic's trust center (trust.anthropic.com/subprocessors, fetched 2026-06-10): 18 subprocessors. Notable: three hyperscalers (GCP, AWS, Azure) plus Palantir Federal Cloud Service for Claude for Government, ElevenLabs for voice mode, and Brave Search/TurboPuffer powering web search.